diff options
| author | Stefano Brivio <sbrivio@redhat.com> | 2022-11-14 23:56:52 +0100 |
|---|---|---|
| committer | Stefano Brivio <sbrivio@redhat.com> | 2022-11-16 15:11:07 +0100 |
| commit | fb7b71b86f5591cc4bf83fcf4081634f4c2980aa (patch) | |
| tree | 5edd8777337d2e3e1ca0baea7c851afbcb3a75f0 /tap.c | |
| parent | b6400db3a642d1960516a748262045d1364d92c1 (diff) | |
| download | passt-fb7b71b86f5591cc4bf83fcf4081634f4c2980aa.tar passt-fb7b71b86f5591cc4bf83fcf4081634f4c2980aa.tar.gz passt-fb7b71b86f5591cc4bf83fcf4081634f4c2980aa.tar.bz2 passt-fb7b71b86f5591cc4bf83fcf4081634f4c2980aa.tar.lz passt-fb7b71b86f5591cc4bf83fcf4081634f4c2980aa.tar.xz passt-fb7b71b86f5591cc4bf83fcf4081634f4c2980aa.tar.zst passt-fb7b71b86f5591cc4bf83fcf4081634f4c2980aa.zip | |
contrib/apparmor: Merge pasta and passt profiles, update rules
AppArmor resolves executable links before profile attachment rules
are evaluated, so, as long as pasta is installed as a link to passt,
there's no way to differentiate the two cases. Merge the two profiles
and leave a TODO note behind, explaining two possible ways forward.
Update the rules so that passt and pasta are actually usable, once
the profile is installed. Most required changes are related to
isolation and sandboxing features.
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Diffstat (limited to 'tap.c')
0 files changed, 0 insertions, 0 deletions